How to report a crypto scam in Malaysia
Act fast — speed is everything. Call the National Scam Response Centre on 997 immediately (within 24 hours); because it links directly to banks, a fast call can freeze the receiving account before the money is moved.
Report online — the fastest step
Call 997 — the National Scam Response Centre — as your first step. A 997 call is now legally treated as a police report, so you don't need to visit a station first. It links directly to banks to try to hold or freeze the receiving mule account.
National Scam Response Centre: 997 (call within 24 hours). PDRM CCID Scam Response Centre: 03-2610 1559.
Who to report to in Malaysia
- •National Scam Response Centre (NSRC) — 997; a joint PDRM/BNM/MCMC/banks effort; a call counts as a police report.
- •PDRM Commercial Crime Investigation Department (CCID) — the police commercial-crime body.
- •Securities Commission Malaysia — the Investor Alert List (unauthorised entities, incl. Digital Assets).
- •Bank Negara Malaysia — Financial Consumer Alert list (deposit-taking/forex).
Check before you pay
Two official "blacklists" to consult: the SC Investor Alert List (investment/securities & digital-asset scams) and BNM's Financial Consumer Alert (deposit-taking, forex, illegal financial services). And before you pay, use Semak Mule to check whether the recipient's bank account or phone number has been reported in fraud cases.
SC — Investor Alert List →Where to get help & support
- •National Scam Response Centre 997 — the primary victim line; call within 24 hours.
- •PDRM CCID Scam Response Centre — 03-2610 1559 / 03-2610 1599.
Do this right now
- •Stop all contact and send no more money — including "fees" or "taxes" to withdraw.
- •Call 997 immediately — it links directly to banks to try to freeze the receiving account.
- •Preserve evidence: screenshots, wallet addresses, transaction hashes, the scam website or app.
- •Report the scam wallet address on Chainabuse.
Malaysia-specific things to know
- •Call 997 immediately — speed is everything. A fast call can trigger a hold/freeze on the receiving mule account before the money is moved; aim for within 24 hours.
- •Check the recipient before you pay with Semak Mule (semakmule.rmp.gov.my) — see whether a bank account or phone number has been reported in fraud cases.
- •Two official blacklists: the SC Investor Alert List (investment/digital-asset) and BNM's Financial Consumer Alert (deposit/forex).
- •A 997 call is legally treated as a police report, so you don't need to visit a station first.
⚠️ Beware "recovery" services. Anyone who contacts you promising to get your money back for an upfront fee is almost always a second scam. See the red flags →
Get a copy-ready evidence summary
Answer 4 quick questions for a tailored checklist + a report template you can hand to each authority. Nothing is saved.
Start the action plan← All countries · Scam guides · Pig-butchering · Recovery scams